WordPress & WooCommerce Blog
Latest news — check out what we’ve been building.
Latest posts
-
CVE-2026-18143: Request a Quote for WooCommerce — Update to 2.9.3
A critical unauthenticated file upload flaw in Request a Quote for WooCommerce is fixed in version 2.9.3. Here’s…
-
CVE-2026-63030: WordPress Core RCE Chain — Confirm You’re Patched
A chained core vulnerability nicknamed wp2shell allows unauthenticated remote code execution. Fixed in 6.8.6, 6.9.5, and 7.0.2 —…
-
CVE-2026-85097: Bricksforge RCE — Update to 3.1.8.10 Now
Bricksforge versions up to 3.1.8.9 allow unauthenticated remote code execution via a file upload flaw. Exploitation is already…
-
WooCommerce Passwordless Login: Why Returning Customers Abandon
Returning-customer login abandonment runs 35-52% across password-based ecommerce flows — highest specifically on mobile.
-
Live Inventory Counters: Accurate Urgency vs Deceptive Design
A counter only helps when it’s real. The feed sync frequency behind it sets how current the number…
-
Dealer Websites Run 8-12 Third-Party Scripts They Don’t Need
The average dealership runs 8-12 third-party tools — widgets, trackers, review integrations — many unused, each adding real…
-
WooCommerce Email Automation: The Flows Native Woo Doesn’t Have
Core WooCommerce has no scheduling, segmentation, or behavioral triggers — welcome, abandoned cart, post-purchase, and win-back flows all…
-
WooCommerce Dynamic Pricing: Discount Rules Beyond Coupons
Stock WooCommerce has no dynamic pricing — quantity tiers, role-based rates, and BOGO deals all require a dedicated…
-
WordPress Cron Monitoring: ‘Running’ and ‘Working’ Are Different
An uptime check confirms your site responds — it doesn’t confirm a scheduled job actually did anything. A…